Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
2024-03-18_4dfbf4af9d41d760e65ee3cbe2b675b8_gandcrab
-
Size
145KB
-
Sample
240318-s1g2xscf6s
-
MD5
4dfbf4af9d41d760e65ee3cbe2b675b8
-
SHA1
c9cc14fa1dd6d78b39c11c13a47678fff34e0a9f
-
SHA256
6e530e98fef1509368cdd214f77fac78f5a1b10185e4ce0de16f109b5555ae98
-
SHA512
fde1b9ca11070ee48b7d7b1f810451f0e8e727db13f7c721e3593e6ee8ec2cdbb6e152ee97f8fe2de1dd39f92fda3b711da08582d601500dfa3ef3634e2048d0
-
SSDEEP
3072:2YHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:2yOqqDL64vdGREz
Behavioral task
behavioral1
Sample
2024-03-18_4dfbf4af9d41d760e65ee3cbe2b675b8_gandcrab.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-03-18_4dfbf4af9d41d760e65ee3cbe2b675b8_gandcrab.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-03-18_4dfbf4af9d41d760e65ee3cbe2b675b8_gandcrab
-
Size
145KB
-
MD5
4dfbf4af9d41d760e65ee3cbe2b675b8
-
SHA1
c9cc14fa1dd6d78b39c11c13a47678fff34e0a9f
-
SHA256
6e530e98fef1509368cdd214f77fac78f5a1b10185e4ce0de16f109b5555ae98
-
SHA512
fde1b9ca11070ee48b7d7b1f810451f0e8e727db13f7c721e3593e6ee8ec2cdbb6e152ee97f8fe2de1dd39f92fda3b711da08582d601500dfa3ef3634e2048d0
-
SSDEEP
3072:2YHVHd2NCMqqDL2/mr3IdE8we0Avu5r++ygLIaagvdCjRv9OtN:2yOqqDL64vdGREz
Score10/10-
GandCrab payload
-
Detects ransomware indicator
-
Gandcrab Payload
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-